CVE-2023-0627

7.8 highEPSS 0.3%

High (7.8) in docker docker desktop. EPSS 0.3% chance of exploitation in the next 30 days.

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-501
Published: 2023-09-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

docker:docker_desktop

References

https://docs.docker.com/desktop/release-notes/#4120
https://docs.docker.com/desktop/release-notes/#4120

Check your stack JSON